fredsmith utils Filename screenshot_sync predictable state

Summaryinfo

A vulnerability, which was classified as problematic, has been found in fredsmith utils. Impacted is an unknown function of the file screenshot_sync of the component Filename Handler. The manipulation leads to predictable state. This vulnerability is traded as CVE-2021-4277. There is no exploit available. Applying a patch is the recommended action to fix this issue.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in fredsmith utils (affected version unknown). This issue affects an unknown functionality of the file screenshot_sync of the component Filename Handler. The manipulation with an unknown input leads to a predictable state vulnerability. Using CWE to declare the problem leads to CWE-341. A number or object is predictable based on observations that the attacker can make about the state of the system or network, such as time, process ID, etc. Impacted is confidentiality.

The weakness was shared 12/24/2022 as dbab1b66955eeb3d76b34612b358307f5c4e3944. The advisory is shared at github.com. The identification of this vulnerability is CVE-2021-4277. Technical details are known, but no exploit is available. MITRE ATT&CK project uses the attack technique T1600.001 for this issue.

Applying the patch dbab1b66955eeb3d76b34612b358307f5c4e3944 is able to eliminate this problem. The bugfix is ready for download at github.com.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• fredsmith

Name

• utils

License

• open-source

Website

• Product: https://github.com/fredsmith/utils/

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion